DHL phish running on ighighschool[.]edu[.]bd

Found: 2018-05-17 00:16:49.075000
URL: http://www.ighighschool.edu.bd/wp-content/uploads/2018/package/DHL.zip
File: www.ighighschool.edu.bd-package-DHL.zip
Domain: ighighschool.edu.bd
Target: DHL
Name                                               Size Date                 MD5                                DHL/DHL/.htaccess                                   8251 2017-05-02 08:23:16  0b78ed9674e6877625e54c1e3840b6f0
    File appears in 6 kits
DHL/DHL/blocker.php                                 2644 2017-04-28 11:33:46  5aa3f3f406ced12d0bc7742e77b01781
    File appears in 271 kits  and under 5 different file names
DHL/DHL/deliveryform.php                            3494 2017-06-12 14:31:24  68ff5b897a92af9a86c7d3b9bcfe54ce
    File appears in 6 kits
DHL/DHL/done.php                                   31099 2016-08-08 15:56:30  e37774fc174a70a34583642ec8ffa8f1
    File appears in 9 kits
DHL/DHL/images/5_1_dhl_global_locator_all_340_187.gif  4135 2015-04-13 08:45:08  b902d3274524ff1e7d328025bf3e6501
    File appears in 30 kits
DHL/DHL/images/alert-icon-red-md.png               39161 2015-04-13 10:28:02  dcffb50e8b700cef50b4a0a9db375235
    File appears in 29 kits
DHL/DHL/images/aol.jpg                             37211 2015-04-13 09:06:58  0ae6254cdb0e0bf52c6711319bb9deb6
    File appears in 28 kits
DHL/DHL/images/dhl_logo.gif                          443 2015-04-13 08:45:22  749b06c85447bd7bc889ecbaaa0980ee
    File appears in 33 kits
DHL/DHL/images/favicon.gif.ico                      2238 2015-04-13 08:44:54  a6f1af8e79a11829ba9a66474b06bb97
    File appears in 32 kits  and under 2 different file names
DHL/DHL/images/gmail.jpg                           15630 2015-04-13 09:51:10  62f27f7c15772f6017d8420ce347e163
    File appears in 28 kits
DHL/DHL/images/horde.png                            5030 2015-04-13 09:14:00  c603256d7db596d90d695429190a8f14
    File appears in 28 kits
DHL/DHL/images/login.JPG                            8956 2015-06-23 17:13:06  606de1c338b23e21c23720c33928db14
    File appears in 23 kits
DHL/DHL/images/netease_png.png                       992 2015-04-13 08:59:44  dd047422863fbf769906668bcb3c0ad9
    File appears in 33 kits  and under 3 different file names
DHL/DHL/images/outlook.jpg                         17055 2016-12-15 22:55:24  d021f93a585813634c856dcd8f97c204
    File appears in 6 kits
DHL/DHL/images/roundcube.png                       29277 2015-04-13 09:44:58  385c0fbfcc2972e0bd01e1bf92e8ed0b
    File appears in 28 kits
DHL/DHL/images/Squirrelmail_logo.png               41510 2015-04-13 09:11:52  8a5946eca6e1640efdc2c761ecd6b89b
    File appears in 28 kits
DHL/DHL/images/Thumbs.db                           133120 2017-06-12 14:15:48  540275c78455c890935ca6629cb039c9
    File appears in 6 kits
DHL/DHL/images/yahoo.jpg                           16934 2015-04-13 09:03:58  468a044204af6794753ec71d53e8893e
    File appears in 28 kits
DHL/DHL/index.php                                    401 2017-06-12 13:56:36  02d6dde3911caff6b9d19be52ff6e811
    File appears in 6 kits
DHL/DHL/Logon.php                                   2247 2018-05-02 01:56:40  98c09d8ceb3829e64ef731b28c5fb042

DHL/DHL/Logon2.php                                  2250 2018-05-02 01:57:14  f002fe64d11193f880ccb368fe106f66

DHL/DHL/robots.txt                                  1337 2017-04-28 11:33:46  ba613657ddd17df5e61d5571b9c9d681
    File appears in 134 kits
DHL/DHL/Secinfo.php                                 2659 2018-05-02 01:58:00  0b12e6f53ff020bbf52cca3244c78bb1

DHL/DHL/tracking.php                                3768 2017-06-12 14:30:50  a9d1019b91b9f5ed04701054c9cca8a9
    File appears in 6 kits
DHL/DHL/tracking2.php                               4019 2017-06-12 14:31:10  98a5f7c5a88e16de4666886baa0b8203
    File appears in 6 kits

3 Email addresses found:
    potpourrilogs@gmail.com
    otuju@xsender.com
    info@xsender.com (appears in 6 kits)



https://texasmalwareblog.blogspot.com   @phish_total